Re: IOS IDS configuration

Dan Tesch wrote:

> Hi, we have the IOSIDS functions enabled in our 2611
> and I have read the docs but don't know if I can
> disable single lines in the config.
>
> example:
>
> ip inspect max-incomplete high 1100
> ip inspect one-minute high 1100
> ip inspect name Ethernet_0_1 smtp
> ip inspect name Ethernet_0_1 ftp
> ip inspect name Ethernet_0_1 tcp
> ip inspect name Ethernet_0_1 udp
> ip inspect name Ethernet_0_1 cuseeme
> ip inspect name Ethernet_0_0 tcp
> ip inspect name Ethernet_0_0 udp
> ip inspect name Ethernet_0_0 cuseeme
> ip inspect name Ethernet_0_0 ftp
> ip inspect name Ethernet_0_0 h323
> ip inspect name Ethernet_0_0 rcmd
> ip inspect name Ethernet_0_0 realaudio
> ip inspect name Ethernet_0_0 smtp
> ip inspect name Ethernet_0_0 streamworks
> ip inspect name Ethernet_0_0 vdolive
> ip inspect name Ethernet_0_0 sqlnet
> ip inspect name Ethernet_0_0 tftp
> ip audit notify log
> ip audit po max-events 100
>
> these appear to be defaults, if I am not using something like
> vdolive, sqlnet, streamworks, realaudio, etc. can I delete the lines?
> are there some helpful extra parameters anyone can suggest?
>
> Thanks
>  
Type the line you wish to delete with a 'no' infront of it, should do it.
(eg 'no ip inspect name Ethernet_0_1 ftp')